/var/

/var/logs/

/var/log/messages
– Contains Linux system logs (kernel, sysctl, etc), as well as logs for BIND(named), and detailed logs for pureftpd sessions

/var/log/cron
– Logs commands run for various system users by the cronjob system (crond)

/var/log/maillog
– cPanel POP3 server (cpop) logs, as well as spamd logs

/var/log/exim_mainlog
– Exim log for incoming and outgoing messages. Very useful when troubleshooting email issues.

/usr/local/cpanel/logs/access_log
– Stores log of pages and commands performed by cPanel users

/var/cpanel/logs
– Directory stores logs for cPanel account transfers

/usr/local/cpanel/logs/access_log
– Stores log of pages and commands performed by cPanel users

/var/cpanel/updatelogs
– Not a log file, but a directory containing cPanel system update logs

/var/cpanel/

Houses proprietary configuration data for cPanel, including:

1. Primary cPanel configuration
2. User configurations
3. Reseller configurations
4. Accounting, conversion, and update logs
5. Bandwidth data
6. Customized service templates

/var/cpanel/cpanel.config

1. The primary cPanel configuration file
2. Each variable within influences the way cPanel behaves
3. Variables are line delimited, with variables separated by an equal sign
4. If file does not exist, cpanel falls back to defaults

/var/cpanel/resellers

1. Lists each reseller with a comma-delimited list of WHM resources that reseller has access to.

/var/cpanel/accounting.log

1. Contains a list of accounting functions performed through WHM, including account removal and creation.

/var/cpanel/bandwidth

1. Files contain a list of the bandwidth history for each account.
2. Each named after their respective user.
3. History files are stored in human-readable format, while actual bandwidth data are stored in round robin databases.

/var/cpanel/features

1. File name is inherited from the feature list name.
2. Contains a line delimited list of feature variables and a zero or one value.
3. Variables control what cPanel resources are available to users.

/var/cpanel/packages

1. Contains a list of packages, named after the packages they represent.
2. If package belongs to reseller, file name is prefixed with reseller name.
3. Each of these values determines the values created in cPanel user file.

/var/cpanel/users

1. Contains a list of cPanel user configuration files, named after the user they pertain to.
2. Variables define account resources, themes, domains, etc.

Other notable /var/cpanel directories
/var/cpanel/logs/
– This directory contains logs from account copies/transfers.
/var/cpanel/updatelogs
– Contains the output of each cPanel update executed on the server.
/var/cpanel/zonetemplates/
– Contains customized DNS zone templates created inWHM